[03/Sep/2021:02:43:55 +0200] 52.33.228.5 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [03/Sep/2021:03:18:11 +0200] 212.102.35.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [03/Sep/2021:03:35:59 +0200] 40.77.167.36 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304 [03/Sep/2021:03:49:14 +0200] 144.86.173.27 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391 [03/Sep/2021:04:52:00 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [03/Sep/2021:05:05:31 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [03/Sep/2021:05:32:55 +0200] 185.216.117.76 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /emergency.php HTTP/1.1" 407 [03/Sep/2021:05:50:11 +0200] 178.73.215.171 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 388 [03/Sep/2021:06:13:46 +0200] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [03/Sep/2021:06:47:32 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [03/Sep/2021:07:21:10 +0200] 80.82.77.192 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Sep/2021:07:28:00 +0200] 74.120.14.57 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [03/Sep/2021:07:28:01 +0200] 74.120.14.57 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Sep/2021:07:30:30 +0200] 192.241.221.186 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Sep/2021:07:30:35 +0200] 64.62.197.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [03/Sep/2021:08:15:16 +0200] 193.106.29.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Sep/2021:09:51:37 +0200] 185.202.1.30 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [03/Sep/2021:12:39:52 +0200] 192.241.215.139 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [03/Sep/2021:13:24:57 +0200] 40.77.167.36 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304 [03/Sep/2021:13:35:48 +0200] 183.136.225.14 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [03/Sep/2021:13:36:48 +0200] 183.136.225.14 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [03/Sep/2021:13:37:28 +0200] 183.136.225.14 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Sep/2021:13:37:50 +0200] 183.136.225.14 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [03/Sep/2021:14:40:56 +0200] 167.248.133.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [03/Sep/2021:14:40:56 +0200] 167.248.133.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Sep/2021:15:41:15 +0200] 209.141.43.209 TLSv1.2 AES256-SHA "POST /web_shell_cmd.gch HTTP/1.1" 400 [03/Sep/2021:15:48:37 +0200] 185.254.31.134 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [03/Sep/2021:15:48:37 +0200] 185.254.31.134 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [03/Sep/2021:16:06:36 +0200] 182.161.66.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [03/Sep/2021:17:10:00 +0200] 45.79.204.46 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [03/Sep/2021:18:02:02 +0200] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [03/Sep/2021:18:36:19 +0200] 178.32.197.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [03/Sep/2021:19:23:01 +0200] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [03/Sep/2021:19:26:28 +0200] 195.154.63.222 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [03/Sep/2021:19:30:56 +0200] 195.154.62.232 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2946 [03/Sep/2021:19:58:54 +0200] 51.254.49.101 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [03/Sep/2021:21:34:24 +0200] 144.86.173.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [03/Sep/2021:22:46:11 +0200] 40.77.167.36 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304 [03/Sep/2021:23:09:58 +0200] 54.189.21.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [03/Sep/2021:23:11:52 +0200] 54.189.21.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [03/Sep/2021:23:13:08 +0200] 34.211.232.37 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [03/Sep/2021:23:15:59 +0200] 192.241.217.88 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [03/Sep/2021:23:43:49 +0200] 54.36.148.147 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 315 [03/Sep/2021:23:43:57 +0200] 54.36.148.1 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 308 [03/Sep/2021:23:48:00 +0200] 54.244.111.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [03/Sep/2021:23:48:27 +0200] 18.237.117.132 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [03/Sep/2021:23:48:30 +0200] 18.237.117.132 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [03/Sep/2021:23:52:55 +0200] 66.249.64.88 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [03/Sep/2021:23:52:56 +0200] 66.249.64.88 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [04/Sep/2021:00:23:20 +0200] 42.193.45.103 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [04/Sep/2021:00:23:40 +0200] 42.193.45.103 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [04/Sep/2021:00:34:06 +0200] 42.193.45.103 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [04/Sep/2021:00:34:16 +0200] 42.193.45.103 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [04/Sep/2021:00:34:26 +0200] 42.193.45.103 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [04/Sep/2021:00:47:20 +0200] 144.86.173.87 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [04/Sep/2021:01:30:10 +0200] 192.241.221.236 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348